Deluxe88 Privacy Policy

Introduction

This Privacy Policy governs the collection, use, storage, disclosure and protection of personal information by Deluxe88 ("Deluxe88", "we", "us", "our") in connection with the Deluxe88 website and all related gaming, sports betting, payment and support services (collectively, the "Platform"). It applies to all registered players and visitors, including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations across Malaysia.

By registering an account or continuing to use the Platform, you acknowledge that you have read, understood and consented to the data practices described in this Privacy Policy. If you do not agree, you must discontinue use of the Platform and may request account closure. This Privacy Policy is to be read alongside the Deluxe88 Terms & Conditions.

Definitions

The following definitions apply throughout this Privacy Policy:

• Personal Data means any information that identifies or could reasonably identify a natural person, directly or indirectly.
• Processing means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, combination, restriction, erasure or destruction.
• Data Controller means Deluxe88, which determines the purposes and means of Processing Personal Data.
• Data Processor means a third party that Processes Personal Data on behalf of Deluxe88 under a written service agreement.
• Sensitive Personal Data means Personal Data revealing identification numbers, financial account details, biometrics or health information that requires a higher standard of care.
• Consent means a freely given, specific, informed and unambiguous indication of agreement to the Processing of your Personal Data.

Data We Collect

Deluxe88 collects Personal Data through registration, verification, platform usage, payment transactions and customer support interactions. The categories of data collected, and their purpose, are outlined below.

We do not knowingly collect Personal Data from persons under the age of 21. If we become aware that data has been submitted by an underage individual, we will delete it promptly and close the associated account.

Legal Basis for Processing

Deluxe88 relies on the following legal bases when Processing your Personal Data:

• Contractual necessity: Processing required to perform the player agreement — account management, payment processing, wager settlement, KYC verification and support.
• Legal obligation: Processing required to comply with anti-money laundering rules, age-verification mandates, licensing conditions and other applicable regulatory requirements.
• Legitimate interests: Fraud detection, platform security, network integrity, system analytics and responsible gambling monitoring, where those interests are not overridden by your rights.
• Consent: Direct marketing communications and certain cookies, where Consent has been obtained. You may withdraw Consent at any time without affecting the lawfulness of prior Processing.

How We Use Your Data

Deluxe88 uses Personal Data for the following purposes:

• Creating, verifying, maintaining and, where appropriate, closing your account;
• Processing deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong Bank;
• Administering bonuses, promotions and the Deluxe88 loyalty programme;
• Settling sports wagers on EPL, Liga Super Malaysia, UFC and other markets;
• Detecting and preventing fraud, money laundering, account abuse and prohibited conduct;
• Monitoring gaming patterns to identify signs of problem gambling and applying responsible gambling interventions;
• Providing customer support through live chat, email and other available channels;
• Complying with licensing conditions, legal obligations and law-enforcement requests;
• Improving Platform security, performance and user experience through analytics; and
• Sending transactional and, where separately consented, promotional communications.

Data Sharing and Third-Party Processors

Deluxe88 does not sell Personal Data. We may disclose data to the following categories of recipient, each bound by contractual confidentiality and data protection obligations:

• Payment processors and e-wallet providers — to execute deposits and withdrawals, including Touch 'n Go, Boost, GrabPay and Malaysian bank FPX networks.
• KYC and fraud-verification services — to validate identity documents, conduct age verification and screen against sanction lists.
• Game content and live-dealer platform providers — only transactional data necessary to authenticate sessions and record outcomes is shared.
• Cloud infrastructure and hosting providers — for secure storage and platform delivery, subject to industry-standard data protection agreements.
• Analytics and security vendors — to monitor traffic, detect anomalies and maintain platform performance.
• Regulatory authorities and law enforcement — where legally required under anti-money laundering or other applicable laws.

Cross-border transfers of Personal Data are governed by appropriate safeguards, including standard contractual clauses or equivalent mechanisms recognised under applicable data-protection frameworks.

Cookies and Tracking Technologies

Deluxe88 uses cookies and similar tracking technologies to maintain sessions, remember preferences, prevent fraud and measure platform usage. The categories of cookies we may set include:

• Strictly necessary cookies — required to operate the Platform and process logins, payments and security checks. They cannot be disabled.
• Functional cookies — used to remember language preferences, display settings and other personalisation features.
• Analytics cookies — used to collect aggregate data about page visits and feature usage to improve the Platform.
• Security cookies — used to detect unusual login patterns, session hijacking attempts and bot activity.

Non-essential cookies are set only where Consent has been obtained. You may adjust browser settings to block or delete cookies, though this may affect Platform functionality. Strictly necessary cookies cannot be disabled as they are essential to service delivery.

Data Retention

Personal Data is retained for as long as your account is active and for such further periods as are required by applicable law or are necessary for legitimate operational purposes. Common retention considerations are:

• Identity and KYC records are retained for the duration of the account relationship and for a defined period thereafter, consistent with anti-money laundering regulations applicable under our licensing regime.
• Financial transaction records including deposit, withdrawal and wager history are retained for a minimum period sufficient to satisfy auditing and regulatory requirements.
• Customer support records are retained to facilitate the resolution of ongoing or future disputes.
• Marketing-preference records are retained until Consent is withdrawn.

Upon closure of your account, Personal Data that is no longer required will be deleted or anonymised. Data subject to legal hold, ongoing investigation or dispute resolution may be retained for a longer period.

Your Rights

Subject to applicable law, legal retention obligations and the requirements of our licensing, you hold the following rights in relation to your Personal Data at Deluxe88:

To exercise any of these rights, contact Deluxe88 support through the on-site live chat or in writing. We may require identity verification before acting on a request. We aim to respond within a reasonable timeframe. Complex requests may take longer.

Security Measures

Deluxe88 implements layered technical and organisational security controls to safeguard Personal Data against unauthorised access, disclosure, alteration and destruction. These include:

• TLS 1.2 or higher encryption for all data transmitted between your device and the Deluxe88 Platform;
• AES-256 encryption for stored account credentials and sensitive Personal Data;
• Multi-factor authentication options for account access;
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis;
• Regular independent security testing and vulnerability assessments;
• Automated monitoring and alerting for anomalous account activity or access patterns; and
• Staff training on data protection and information security obligations.

Personal Data and Responsible Gambling

Deluxe88 uses gaming activity data as part of its responsible gambling programme. Automated and manual analysis of deposit patterns, session durations, wager frequency and account behaviour helps our team identify players who may be experiencing harm. Where indicators are present, Deluxe88 may contact the player, apply cooling-off periods or take other protective action.

Self-exclusion requests, deposit limits and other responsible gambling preferences are recorded and applied as account-level controls. This data is used solely for player protection and is not shared with third parties for marketing purposes. Information about responsible gambling resources, including text references to services such as Talian Kasih 15999 and GamCare, is available on the Responsible Gambling page.

Changes to This Privacy Policy

Deluxe88 may update this Privacy Policy from time to time to reflect changes in Platform features, payment integrations, legal obligations or data-processing practices. Material changes will be communicated through a prominent notice on the Platform or by email to the address registered to your account. The effective date at the top of this document will be updated accordingly.

Continued use of the Platform after an updated Privacy Policy takes effect constitutes acceptance of the revised terms. If you disagree with a material change, you should stop using the Platform and may request account closure.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or wish to raise a concern about how Deluxe88 handles your Personal Data, please contact us through one of the following channels:

• Live Chat: Available 24/7 directly on the Deluxe88 Platform — the fastest channel for general and account-specific enquiries.
• Email: Write to [email protected] (plain text — not a clickable link). Include your registered username and a clear description of your enquiry. Do not include passwords, authentication codes or full payment details in correspondence.

For data rights requests, please provide sufficient information to allow us to identify your account. We may ask for identity verification before processing your request. We aim to acknowledge privacy-related requests within a reasonable time and to resolve them as efficiently as possible.